Tagged “pip”

CVEs tagged pip, newest first.

5512 CVEsRSS

MAL-2026-18150Critical⚠ Exploited

2w ago

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Image._decompression_bomb_check(). A crafted multi-frame image can …

▾ Twilightpython-pillow · PillowEPSS 0.34%via CVEORG

CVE-2026-114501Medium· 6.3PoC

2w ago

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im->blocks[0].ptr even when PILLOW_ALIGNMENT makes aligned_linesize include row padding or an…

▾ Twilightpython-pillow · PillowEPSS 0.37%via CVEORG

CVE-2026-114138High· 7.5PoC

2w ago

Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation

Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in rest_framework/negotiation.py accepts an unbounded number and aggregate size of Accept tokens, while select_renderer …

▾ Midnightencode · django-rest-frameworkEPSS 0.60%via CVEORG

CVE-2026-114137High· 7.4

2w ago

Django REST framework: TokenProxy.delete() reports success and revokes nothing

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, …

▾ Twilightencode · django-rest-frameworkEPSS 0.51%via CVEORG

CVE-2026-114140High· 8.8PoC

2w ago

nbconvert: File write via path traversal in cell output filenames

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled …

▾ Midnightjupyter · nbconvertEPSS 0.46%via CVEORG

CVE-2026-114145High· 7.5

2w ago

GitPython: GitPython: arbitrary code execution via improper submodule path validation (CVE-2026-114145)

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository d…

▾ TwilightRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.42%via CSAF

CVE-2026-96642High· 7.1PoC

2w ago

Pillow: TarIO negative size field causes infinite CPU-spin loop

Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name doe…

▾ Midnightpython-pillow · PillowEPSS 0.34%via CVEORG

CVE-2026-114135High· 8.8

2w ago

Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization

Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsHandler, which authenticated the user but did not call author…

▾ Twilightjupyter-server · jupyter_serverEPSS 0.48%via CVEORG

Tagged “pip”

Malicious code in voxilaratts (PyPI)

Malicious code in vellutts (PyPI)

Malicious code in tessivatts (PyPI)

Malicious code in solivoxtts (PyPI)

Malicious code in shellgrip (PyPI)

Malicious code in quillonatts (PyPI)

Malicious code in prosodinetts (PyPI)

Malicious code in phonoviatts (PyPI)

Malicious code in orchestril (PyPI)

Malicious code in melcuratts (PyPI)

Malicious code in grommatts (PyPI)

Malicious code in dictanovaasr (PyPI)

Malicious code in crenelatts (PyPI)

Malicious code in codecraze (PyPI)

Malicious code in brummatts (PyPI)

Malicious code in batchspar (PyPI)

Malicious code in aurenatts (PyPI)

Malicious code in journey-test-hellospy (PyPI)

Malicious code in libseal (PyPI)

Malicious code in iterquarry (PyPI)

Malicious code in journey-test-helloshell (PyPI)

Malicious code in moveworks-capi-starter (PyPI)

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation

Django REST framework: TokenProxy.delete() reports success and revokes nothing

nbconvert: File write via path traversal in cell output filenames

GitPython: GitPython: arbitrary code execution via improper submodule path validation (CVE-2026-114145)

Pillow: TarIO negative size field causes infinite CPU-spin loop

Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization